Shifting from checkbox-driven TPRM to risk engineering, using Agentic AI to detect real threats, reduce risk, and stop third-party sprawl.